Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
Security researchers at Zenity Labs reported three vulnerabilities in Salesforce Agentforce that could have enabled attackers to use poisoned Web-to-Lead submissions for CRM data exfiltration and phishing. SecurityWeek reports that…
Threat actors are exploiting a high-severity Roundcube webmail vulnerability, according to an alert from Canada’s Cyber Centre reported by SecurityWeek. The flaw, CVE-2026-48842, is an unauthenticated SQL injection in the…
A ransomware variant called Settra has been used in attacks against retail and manufacturing organizations, according to Huntress research summarized by Infosecurity Magazine. The researchers observed incidents in July and…
CISA has added vulnerabilities affecting Microsoft SharePoint and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. The additions cover CVE-2026-65660 in SharePoint and CVE-2026-67279 in…
Kiteworks has told customers to consider a precautionary shutdown window after receiving credible threat intelligence from law enforcement that a threat actor may target some customer systems, according to reporting…
Anthropic has published a threat-intelligence report describing cyber operations in which actors used Claude in ways that went beyond ordinary chatbot assistance. The company says it disrupted activity involving suspected…
NIST has published a draft update to its operational-technology security guidance, while CISA and the FBI have issued a fact sheet on risks associated with third-party ICS integrators, SecurityWeek reports.…
Researchers have reported a botnet malware family called Carbonato that targets insecure Docker daemons and installs the Hermes Agent AI framework after taking control of exposed hosts. The campaign underlines…
A new MacSync information-stealer variant targeting macOS uses public iCloud calendar events to deliver fresh payloads, BleepingComputer reports. The technique illustrates how attackers can repurpose legitimate cloud services as a…
CISA has warned that ransomware operators are exploiting a critical JetBrains TeamCity vulnerability that was patched in July, according to BleepingComputer. The warning shifts the issue from routine patch management…